MCP server for GPT Researcher that gives Claude deep research, quick search, report writing, source retrieval, research context, and research-resource tools backed by web search and LLM providers.
GPT Researcher MCP Server sends research queries to configured search retrievers and LLM providers, which can create API costs and external data exposure., The server exposes `deep_research`, `quick_search`, `write_report`, source, context, prompt, and resource workflows that can gather and synthesize live web content., Docker mode auto-selects SSE transport on `0.0.0.0:8000`; bind it only on trusted networks and avoid exposing unauthenticated endpoints publicly., Generated reports can contain outdated, biased, incomplete, or hallucinated claims; review sources before acting on medical, legal, financial, or safety-critical output., Protect Claude Desktop or MCP client configuration files because they may contain API keys in the `env` block.
Privacy notes
Research queries, prompts, source URLs, fetched snippets, research context, generated reports, and cost metadata can enter the MCP client context., Provider APIs and search retrievers may receive sensitive research topics, entity names, customer details, or internal strategy questions., The server keeps in-process research IDs, context, source lists, and source URLs for later report/source/context calls during the session., Docker, n8n, SSE, or Streamable HTTP deployments can expose research sessions and messages to other systems on the network if not isolated., Local logs and troubleshooting output may include queries, errors, endpoint names, provider configuration issues, or session identifiers.
Author
Assaf Elovic
Submitted by
oktofeesh1
Claim status
unclaimed
Last verified
2026-06-06
Decision playbook
Review trust signals before you adopt
Signals are present but mixed. Use the checklist below to confirm the source and operational safety for your environment.
Compare context
Selected
0
Current score
63
Baseline
—
Delta
No baseline selected
No major trust-signal divergence detected in the current selection.
Source and provenance checks
Needs review
Confirm ownership and provenance before trusting install instructions.
Source link availableRequired
Open the canonical repository and verify ownership.
Done
Source provenance statusRequired
Marked as source-backed.
Done
Metadata reviewed
No reviewed flag detected in metadata.
Pending
Safety and privacy checks
Complete
Validate risk disclosures before installation or API wiring.
Safety notes presentRequired
Review the listed safety guidance before running commands.
Done
Privacy notes presentRequired
Review data handling notes before connecting accounts or secrets.
Done
Trust level risk gateRequired
Trust level does not block evaluation.
Done
Package and install checks
Needs review
Check package metadata and artifact integrity signals.
Install payload available
Install or copy payload is available for review.
Done
Package verification flag
No package verification flag provided.
Pending
Checksum metadata
No checksum provided for downloaded artifact.
Pending
Compare-driven decision checks
Needs review
Use compare context to validate trade-offs before adoption.
Compare tray has multiple entries
Add at least one more entry to compare trust differences.
5 safety and 5 privacy notes across 4 risk areas. Review closely: credentials & tokens, network access, third-party handling.
4 areas
SafetyThird-party handlingGPT Researcher MCP Server sends research queries to configured search retrievers and LLM providers, which can create API costs and external data exposure.
SafetyGeneralThe server exposes `deep_research`, `quick_search`, `write_report`, source, context, prompt, and resource workflows that can gather and synthesize live web content.
SafetyNetwork accessDocker mode auto-selects SSE transport on `0.0.0.0:8000`; bind it only on trusted networks and avoid exposing unauthenticated endpoints publicly.
SafetyGeneralGenerated reports can contain outdated, biased, incomplete, or hallucinated claims; review sources before acting on medical, legal, financial, or safety-critical output.
SafetyCredentials & tokensProtect Claude Desktop or MCP client configuration files because they may contain API keys in the `env` block.
PrivacyGeneralResearch queries, prompts, source URLs, fetched snippets, research context, generated reports, and cost metadata can enter the MCP client context.
PrivacyThird-party handlingProvider APIs and search retrievers may receive sensitive research topics, entity names, customer details, or internal strategy questions.
PrivacyCredentials & tokensThe server keeps in-process research IDs, context, source lists, and source URLs for later report/source/context calls during the session.
PrivacyCredentials & tokensDocker, n8n, SSE, or Streamable HTTP deployments can expose research sessions and messages to other systems on the network if not isolated.
PrivacyCredentials & tokensLocal logs and troubleshooting output may include queries, errors, endpoint names, provider configuration issues, or session identifiers.
Disclosure: MIT-licensed open source MCP server for GPT Researcher. It requires separate LLM and search provider credentials, and usage may incur provider costs.
Safety notes
GPT Researcher MCP Server sends research queries to configured search retrievers and LLM providers, which can create API costs and external data exposure.
The server exposes `deep_research`, `quick_search`, `write_report`, source, context, prompt, and resource workflows that can gather and synthesize live web content.
Docker mode auto-selects SSE transport on `0.0.0.0:8000`; bind it only on trusted networks and avoid exposing unauthenticated endpoints publicly.
Generated reports can contain outdated, biased, incomplete, or hallucinated claims; review sources before acting on medical, legal, financial, or safety-critical output.
Protect Claude Desktop or MCP client configuration files because they may contain API keys in the `env` block.
Privacy notes
Research queries, prompts, source URLs, fetched snippets, research context, generated reports, and cost metadata can enter the MCP client context.
Provider APIs and search retrievers may receive sensitive research topics, entity names, customer details, or internal strategy questions.
The server keeps in-process research IDs, context, source lists, and source URLs for later report/source/context calls during the session.
Docker, n8n, SSE, or Streamable HTTP deployments can expose research sessions and messages to other systems on the network if not isolated.
Local logs and troubleshooting output may include queries, errors, endpoint names, provider configuration issues, or session identifiers.
Prerequisites
Python 3.11 or newer.
OpenAI API key, or another GPT Researcher-compatible LLM provider configuration.
Tavily API key or another GPT Researcher-compatible search retriever.
A cloned `assafelovic/gptr-mcp` repository with dependencies installed from `requirements.txt`.
Review of whether local stdio, Docker SSE, or Streamable HTTP transport is appropriate for your MCP client.
Schema details
Install type
cli
Troubleshooting
No
Source repository stats
Scope
Source repo
Collection metadata
Estimated setup
20 minutes
Difficulty
advanced
Tool listing metadata
Disclosure
MIT-licensed open source MCP server for GPT Researcher. It requires separate LLM and search provider credentials, and usage may incur provider costs.
GPT Researcher MCP Server connects Claude and other MCP clients to GPT
Researcher through a dedicated MCP server repository. It exposes tools for deep
web research, faster search, report writing, source retrieval, context retrieval,
and reusable research resources.
Use it when Claude needs a supervised research workflow that can gather multiple
sources, return citations, and produce a draft report instead of only returning a
short web-search result list.
These sources were reviewed on 2026-06-06. Prefer the dedicated MCP
repository, README, linked GPT Researcher upstream, license, server source,
utilities, dependency list, environment example, Dockerfile, and compose file for
current setup and behavior details.
Features
Run deep_research for multi-source web research with source URLs and context.
Run quick_search for faster search-result snippets.
Generate reports from a previous research session with write_report.
Retrieve research sources and full research context by research ID.
Expose a research://{topic} resource for reusable research context.
Use a research_query prompt to shape a research task and report goal.
Run over local stdio for desktop MCP clients.
Use Docker/SSE or Streamable HTTP transport for containerized or web-oriented
integrations.
Installation
Clone the dedicated MCP server repository and install its Python dependencies:
git clone https://github.com/assafelovic/gptr-mcp.git
cd gptr-mcp
pip install -r requirements.txt
Set provider credentials in the MCP client configuration. For a local stdio
client, point to server.py:
Docker mode auto-detects container execution and switches to SSE transport on
port 8000.
Use Cases
Ask Claude to research a current topic, company, market, library, or technical
question with source-backed context.
Generate a report from previously gathered research context.
Retrieve the source list or full research context behind an answer.
Compare quick search output against deeper research before spending more API
budget.
Connect a Dockerized MCP deployment to n8n or another client that expects SSE
endpoints.
Safety and Privacy
GPT Researcher MCP Server is a networked research tool. Treat every query as
data that may be sent to model providers, search retrievers, and fetched web
sources. Keep prompts free of secrets and review provider retention rules before
using it for customer, legal, medical, financial, or internal strategy research.
For local use, protect MCP client config files that contain API keys. For Docker,
n8n, SSE, or Streamable HTTP deployments, bind only to trusted networks, isolate
containers, and avoid exposing research sessions or /messages endpoints without
an authentication layer.
Show that GPT Researcher MCP Server is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.
[](https://heyclau.de/entry/mcp/gpt-researcher-mcp-server)
How it compares
GPT Researcher MCP Server side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.
MCP server for GPT Researcher that gives Claude deep research, quick search, report writing, source retrieval, research context, and research-resource tools backed by web search and LLM providers.
No-key multi-engine MCP server, CLI, and local daemon for web search and public web content retrieval across engines such as Bing, DuckDuckGo, Brave, Exa, Baidu, CSDN, Juejin, Startpage, and Sogou.
✓GPT Researcher MCP Server sends research queries to configured search retrievers and LLM providers, which can create API costs and external data exposure.
The server exposes `deep_research`, `quick_search`, `write_report`, source, context, prompt, and resource workflows that can gather and synthesize live web content.
Docker mode auto-selects SSE transport on `0.0.0.0:8000`; bind it only on trusted networks and avoid exposing unauthenticated endpoints publicly.
Generated reports can contain outdated, biased, incomplete, or hallucinated claims; review sources before acting on medical, legal, financial, or safety-critical output.
Protect Claude Desktop or MCP client configuration files because they may contain API keys in the `env` block.
✓open-webSearch can send search queries to multiple public engines and fetch public web pages, GitHub READMEs, CSDN articles, Juejin articles, and other supported targets.
Search and fetch results can be incomplete, stale, rate-limited, blocked, region-dependent, or affected by search-engine ranking and scraping protections.
Respect each target site's terms and robots expectations; do not use the server for abusive scraping, credentialed browsing, paywall bypass, or personal-data harvesting.
The optional local daemon exposes HTTP endpoints for local tooling; keep it bound to trusted local interfaces and do not treat it as a public internet API.
Proxy settings, Playwright WebSocket/CDP endpoints, and reused browser sessions can route traffic or cookies through external systems; configure them deliberately.
Leave TLS verification enabled unless a specific target has a broken certificate chain and the risk has been accepted.
✓Deep Research can make repeated model and search-provider calls, so set budgets, rate limits, and provider quotas before exposing it to broad agent workflows.
Generated reports can contain stale, incomplete, or misinterpreted sources; require citation review before using output in legal, medical, financial, security, or customer-facing decisions.
Bind Docker deployments to localhost unless a trusted reverse proxy or firewall is in front of the service, and set `ACCESS_PASSWORD` or equivalent gateway controls before enabling MCP access.
Uploaded documents and local knowledge bases should be reviewed for copyright, sensitive data, and permission to process before research begins.
✓Kagi MCP sends search queries, page URLs, filters, date ranges, lens IDs, and extraction requests to the Kagi API.
Search and extraction calls can consume Kagi API quota or create API costs, especially when using high limits or inline page extraction.
The `kagi_extract` tool fetches public page content as markdown; do not ask it to retrieve private, paywalled, or terms-restricted content unless you have permission.
In HTTP mode, clients provide Kagi API keys through bearer tokens; expose the endpoint only behind trusted transport, access controls, and log redaction.
The server supports configurable timeouts, retries, and hidden search parameters; tune these before giving broad agent access to current-web workflows.
Privacy notes
✓Research queries, prompts, source URLs, fetched snippets, research context, generated reports, and cost metadata can enter the MCP client context.
Provider APIs and search retrievers may receive sensitive research topics, entity names, customer details, or internal strategy questions.
The server keeps in-process research IDs, context, source lists, and source URLs for later report/source/context calls during the session.
Docker, n8n, SSE, or Streamable HTTP deployments can expose research sessions and messages to other systems on the network if not isolated.
Local logs and troubleshooting output may include queries, errors, endpoint names, provider configuration issues, or session identifiers.
✓Search queries, fetched URLs, result titles, snippets, article content, proxy URLs, browser endpoints, and fetched page text can be exposed to MCP clients, logs, and model context.
Live search engines and fetched websites may observe queries, IP address, proxy exit, browser fingerprints, cookies, timing, and request headers.
Playwright fallback or CDP reuse can expose browser state, existing cookies, logged-in sessions, or verification state to fetched pages.
The project includes public URL validation and private-network target protections, but operators should still avoid fetching internal, secret, or customer-specific URLs.
Redact sensitive search terms and downloaded page content before sharing transcripts or logs.
✓Research prompts, uploaded files, generated reports, search queries, citations, model inputs, model outputs, provider API keys, access passwords, and deployment logs can contain sensitive data.
Browser-local history and knowledge-base storage are local to the deployed app context, but server-side API mode can route data through the deployment host, model providers, and search providers.
Review hosting logs, cache behavior, environment variable handling, and third-party provider retention before using Deep Research with private or regulated material.
✓Kagi receives search queries, requested URLs, search filters, result domains, lens IDs, extraction targets, API keys, and request metadata.
MCP clients and logs may store user questions, result snippets, extracted markdown, trace IDs, and error bodies returned by the Kagi API.
Hosted HTTP deployments can process keys for multiple users; avoid server, proxy, and platform logs that record `Authorization` headers.
Extracted pages may include personal data, copyrighted text, internal URLs, or sensitive context if the user provides those URLs.
Prerequisites
Python 3.11 or newer.
OpenAI API key, or another GPT Researcher-compatible LLM provider configuration.
Tavily API key or another GPT Researcher-compatible search retriever.
A cloned `assafelovic/gptr-mcp` repository with dependencies installed from `requirements.txt`.
Node.js 18 or newer for the published npm package.
Review of search-engine terms, scraping limits, rate limits, and allowed use for the target websites.
Optional proxy configuration only when live search or fetch traffic must route through an approved proxy.
Optional Playwright or browser endpoint setup only when request-based search/fetch is insufficient.
Deployed Deep Research instance on Docker, Vercel, Cloudflare Pages, or another supported host with `ACCESS_PASSWORD` or equivalent access controls configured.
LLM provider credentials for the configured thinking and task models.
Search provider credentials when using Tavily, Firecrawl, Exa, Bocha, Brave, Searxng, or another non-model search path.
MCP client with Streamable HTTP or SSE transport support and timeout settings long enough for research runs.
Python 3.12 and uv for the recommended `uvx kagimcp` install path.
A Kagi API key stored in `KAGI_API_KEY` for local stdio use.
Review of Kagi API billing, rate limits, search workflows, extraction behavior, and any client logs that may capture query text.
Optional HTTP deployment review if exposing the streamable HTTP transport to multiple users.